Configure a custom domain name for a self-hosted gateway
Availability
Important
This feature is available in the Premium and Developer tiers of API Management.
When you provision a self-hosted Azure API Management gateway, it is not assigned a host name and has to be referenced by its IP address. This article shows how to map an existing custom DNS name (also referred to as hostname) to a self-hosted gateway.
Prerequisites
To perform the steps described in this article, you must have:
An active Azure subscription.
If you don't have an Azure subscription, create a trial account before you begin.
An API Management instance. For more information, see Create an Azure API Management instance.
A self-hosted gateway. For more information, see How to provision self-hosted gateway
A custom domain name that is owned by you or your organization. This topic does not provide instructions on how to procure a custom domain name.
A DNS record hosted on a DNS server that maps the custom domain name to the self-hosted gateway's IP address. This topic does not provide instructions on how to host a DNS record.
You must have a valid certificate with a public and private key (.PFX). The subject or subject alternative name (SAN) has to match the domain name (this enables the API Management instance to securely expose URLs over TLS).
Go to your API Management instance
In the Azure portal, search for and select API Management services.
On the API Management services page, select your API Management instance.
Add custom domain certificate to your API Management service
Add a custom domain certificate (.PFX) file to your API Management instance, or reference a certificate stored in Azure Key Vault. Follow steps in Secure backend services using client certificate authentication in Azure API Management.
Note
We recommend using a key vault certificate for the self-hosted gateway domain.
Use the Azure portal to set a custom domain name for your self-hosted gateway
- Select the Gateways from under Deployment and infrastructure.
- Select the self-hosted gateway you want to configure the domain name for.
- Select Hostnames under Settings.
- Select + Add
- Enter resource name for the hostname into the Name field.
- Enter domain name in the Hostname field.
- Select a certificate from the Certificate dropdown.
- Select Negotiate client certificate checkbox if any of the APIs exposed via this gateway use client certificate authentication.
Warning
This setting is shared by all domain names configured for the gateway.
- Select Add to assign the custom domain name to the selected self-hosted gateway.
Note
If clients connecting to the self-hosted gateway using the custom domain expect to be presented with all intermediate certificates in the chain, you must upload individual CA certificates to your API Management Service and associate them with the self-hosted gateway. For instructions on how to achieve this, see Create custom CA for self-hosted gateway .